Not able to update and stuck at 19.7

[behcs]

Done a fresh install using version 19.7.
Click the "Check for updates". But, system always return "There are no updates available on the selected mirror."

When I click on the Change Log, it shows latest version is 19.7.6.

How can I force the system to update to 19.7.6 ?

Code: [Select]

Version Date
19.7.6 2019-11-01
19.7.5 2019-10-11
19.7.4 2019-09-11
19.7.3 2019-08-28
19.7.2 2019-08-05
19.7.1 2019-07-25
19.7 (installed) 2019-07-17

[franco]

Hi,

What's strange is that newer changelogs are pulled from the mirror, but no updates are found on the same?

Can you do the following to double-check from the console?

# opnsense-update -M
# pkg update -f


Cheers,
Franco

[behcs]

Hi Franco,

    Yes, looks strange.

Code: [Select]

root@xxxx:/usr/local/www # opnsense-update -M
https://pkg.opnsense.org/FreeBSD:11:amd64/19.7

root@xxxx:/usr/local/www # pkg update -f
Updating OPNsense repository catalogue...
Fetching meta.txz: 100%    1 KiB   1.5kB/s    00:01
Fetching packagesite.txz: 100%  178 KiB 181.9kB/s    00:01
Processing entries: 100%
OPNsense repository update completed. 700 packages processed.
All repositories are up to date.



[franco]

Ok, next one...

# pkg info | wc -l

I assume it says "0" which is kinda bad because then the package database was corrupted.

Can be fixed, just need confirmation

[behcs]

err.. not 0..

Code: [Select]

root@xxxx:/etc # pkg info | wc -l
      71
root@xxxx:/etc #


Code: [Select]

root@xxxx:/etc # uname -a
FreeBSD xxxx 11.2-RELEASE-p11-HBSD FreeBSD 11.2-RELEASE-p11-HBSD  ab3b8b47944(stable/19.7)  amd64


[behcs]

OK. I have another existing production system currently on 19.7.2

Code: [Select]

Versions OPNsense 19.7.2-amd64
FreeBSD 11.2-RELEASE-p12-HBSD
OpenSSL 1.0.2s 28 May 2019

I notice these strange behavior..

on the 19.7.2 system :

Code: [Select]

root@OLD:/etc # uname -a
FreeBSD OLD 11.2-RELEASE-p12-HBSD FreeBSD 11.2-RELEASE-p12-HBSD  0f8d026f0ea(stable/19.7)  amd64
root@OLD:/etc # opnsense-update -M
https://pkg.opnsense.org/FreeBSD:11:amd64/19.7
root@OLD:/etc # cat /usr/local/opnsense/version/base
19.7.2
root@OLD:/etc # pkg info
arc-5.21p                      Create & extract files from DOS .ARC files
arj-3.10.22_8                  Open source implementation of the ARJ archiver
arp-scan-1.9                   ARP scanning and fingerprinting tool
arpwatch-2.1.a15_10            Monitor arp & rarp requests
bash-5.0.7                     GNU Project's Bourne Again SHell
beep-1.0_1                     Beeps a certain duration and pitch out of the PC Speaker
brotli-1.0.7_2,1               Generic-purpose lossless compression algorithm
bsdinstaller-19.7              BSD Installer mega-package
c-icap-0.5.5,2                 ICAP server implementation
c-icap-modules-0.5.3_1         Modules for c-icap: virus_scan and srv_url_check
ca_root_nss-3.45               Root certificate bundle from the Mozilla Project
choparp-20150613               Simple proxy arp daemon
clamav-0.101.2,1               Command line virus scanner written entirely in C


But, on the newly installed system (19.7):

Code: [Select]

Versions OPNsense 19.7-amd64
FreeBSD 11.2-RELEASE-p11-HBSD
OpenSSL 1.0.2t 10 Sep 2019


Code: [Select]

root@xxxx:/etc # uname -a
FreeBSD xxxx 11.2-RELEASE-p11-HBSD FreeBSD 11.2-RELEASE-p11-HBSD  ab3b8b47944(stable/19.7)  amd64
root@xxxx:/etc # cat /usr/local/opnsense/version/base
19.7
root@xxxx:/etc # pkg info
arc-5.21p                      Create & extract files from DOS .ARC files
arj-3.10.22_8                  Open source implementation of the ARJ archiver
arpwatch-2.1.a15_10            Monitor arp & rarp requests
bash-5.0.11                    GNU Project's Bourne Again SHell
brotli-1.0.7_2,1               Generic-purpose lossless compression algorithm
c-icap-0.5.5,2                 ICAP server implementation
c-icap-modules-0.5.3_1         Modules for c-icap: virus_scan and srv_url_check
ca_root_nss-3.47               Root certificate bundle from the Mozilla Project
clamav-0.101.4,1               Command line virus scanner written entirely in C
curl-7.66.0                    Command line tool and library for transferring data with URLs
cvsps-2.1_2                    Create patchset information from CVS
dmidecode-3.2                  Tool for dumping DMI (SMBIOS) contents in human-readable format
expat-2.2.8                    XML 1.0 parser written in C
gettext-runtime-0.20.1         GNU gettext runtime libraries and programs

It seems like I have newer packages on the newly installed system, even though the version is 19.7.

eg.
19.7 system (newly installed) :  bash-5.0.11
19.7.2 system (existing old system) : bash-5.0.7

It looks like freebsd / openssl updated somehow. But, OPNsense not get updated.
Does these provide any clues?

[behcs]

Hi Franco,

     I did another fresh install. And the first step I did is to upgrade the firmware from WebGui.  It seems this one work normally.

    I'm not so sure which steps causing the problem on previous set. I suspect on previous set, I added package tree (by enabling FreeBSD package temporary, /usr/local/etc/pkg/repos/FreeBSD.conf ). Then, I try to do upgrade on the OPNSense firmware from WebGui. Some how things get messed up?

   

[franco]

Hi,

I'm not entirely sure. FreeBSD package mirror is never a good idea, because we have different options that won't merge well with FreeBSD for a number of reasons (main one being FreeBSD packages are built against base OpenSSL, but we use ports OpenSSL or LibreSSL for better maintainability).

The best way to fix such systems is to do a full bootstrap, which won't touch your configuration:

# opnsense-bootstrap

Basically it reinstalls the latest version cleanly on top of what you have right now.


Cheers,
Franco

[labsy]

Hi Franco,

I've faced strange behavior upon upgrading from 19.1.10 to 19.7.x version. Seems like some of my configuration was misinterpreted, as simple PING to public internet did not work anymore. It was the same if I did upgrade of working system, or fresh install 19.7, update to latest, then import old config - in both cases ping to public internet fails, some NAT rules also stopped working...did not have time to investigate further.

Here's my BUG report if it maters anyhow: https://github.com/opnsense/core/issues/3809

BTW: You say that this command can install fresh over what you have, and preserve existing config? Is this in any way different than normal upgrade?

Code: [Select]

# opnsense-bootstrap

[labsy]

Anybody else with same problems? Or me alone, meaning, I will need to manually re-type the whole config to fresh install...